Bug#1037267: kawari8: reproducible-builds: timezone-dependent timestamps on files in documentation files

Vagrant Cascadian vagrant at reproducible-builds.org
Fri Jun 9 21:10:47 BST 2023


Source: kawari8
Severity: normal
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps timezone
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

The build timestamp is embedded in various /usr/share/doc/kawari8/ files
is timezone dependent:

  https://tests.reproducible-builds.org/debian/rb-pkg/bookworm/amd64/diffoscope-results/kawari8.html

  -rw-r--r--···0·root·········(0)·root·········(0)····12246·2002-06-04·10:07:44.000000·./usr/share/doc/kawari8/html/banners/kawalinks.png
  vs.
  -rw-r--r--···0·root·········(0)·root·········(0)····12246·2002-06-03·08:07:44.000000·./usr/share/doc/kawari8/html/banners/kawalinks.png

The attached patch to debian/rules fixes this by exporting the TZ
variable with the UTC timezone, as part of the build process unzips the
upstream .zip file, which sets the timestamps using the local timezone.

Another option might be to switch to using dpkg-source format 3.0 quilt,
debhelper/dh, and repacking the upstream .zip file into an .orig.tar.*
file using uscan and debian/watch. This probably has numerous other
benefits as well...


According to my local tests, with this patch applied kawari8 should build
reproducibly on tests.reproducible-builds.org!

Thanks for maintaining kawari8!

live well,
  vagrant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-debian-rules-Export-TZ-UTC-variable.patch
Type: text/x-diff
Size: 824 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20230609/72e24fc9/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20230609/72e24fc9/attachment.sig>


More information about the Reproducible-bugs mailing list